Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
File:                     b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json)
Hash identifier:          mpH10r0X6GCpECm291X4r2LIKGnU/UU5GT86q6+goak=
Subject key identifier:   F0:D7:B1:78:41:EC:72:46:C3:A8:CD:1E:DE:61:3F:A0:D6:81:FA:E6
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Certificate issuer:       /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial:       019D9AE317CEC40039FC08BE27EE1ABCF4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
Manifest number:          0273
Signing time:             Fri 17 Apr 2026 10:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:06 +0000
Files and hashes:         1: DaJESnUPstRnvc8gyVuGJJGAc7Y.roa (hash: XZbUEMnqmV6tcLHU8cRnDGbe97bObMl8R2ndAHcyFi8=)
                          2: FNDjx2az9tCR_VzC5TbRTJVU45M.roa (hash: P36YaarhMgLgB/2+d+QXhzMEz6mV4aOY72ihhGMy3DY=)
                          3: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: 6PLr/pKeH3SpUalWQUD9AWLwegHg3BMp3odgxQNgh9E=)
                          4: mdu3xdhyXhJdxS8EEEljr-DR8go.roa (hash: rnQ2hZVq/YedWUKl/nEjRuy3KybsEEgeJU8EAN9cR0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:17:ce:c4:00:39:fc:08:be:27:ee:1a:bc:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
        Validity
            Not Before: Apr 17 10:01:06 2026 GMT
            Not After : Apr 18 10:01:06 2026 GMT
        Subject: CN=f0d7b17841ec7246c3a8cd1ede613fa0d681fae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:8b:bd:62:c7:b4:47:43:c8:04:99:bc:1b:
                    02:a5:1f:e1:59:08:11:a9:00:8d:52:4b:07:42:69:
                    a9:dd:76:82:de:d3:a1:3c:fa:17:cd:07:bc:dd:69:
                    51:b1:2e:32:e6:d6:6f:eb:e3:a6:ab:b6:cb:7e:99:
                    72:e8:f1:15:70:ae:ad:ad:5a:ce:3c:62:c6:f8:5f:
                    6f:dd:d1:f6:26:97:a7:76:e2:c3:1b:8e:0c:fa:b6:
                    ee:fc:2a:a4:ed:d3:ec:3f:97:27:1b:07:cd:24:5b:
                    28:8b:7c:a0:fd:f6:a5:9d:dd:7a:28:6e:a1:dc:c0:
                    d6:ec:00:8a:d1:66:0e:f9:a9:fb:e1:84:f8:7c:91:
                    a1:ef:f3:c5:76:4f:9d:fe:fa:fe:b6:a5:34:d8:50:
                    f4:c7:c3:ba:92:1d:0f:6e:79:e9:8b:cf:d2:fc:2d:
                    2c:b5:02:d9:ab:73:c5:89:57:3a:ae:78:bc:99:1f:
                    86:77:eb:9a:98:88:5f:25:48:c7:fc:ea:a5:01:6b:
                    4b:3c:f1:0b:cc:5d:16:42:7a:50:4f:f8:d7:ae:a9:
                    65:65:23:f4:c4:1a:25:e2:6f:8b:bb:33:4c:8a:ad:
                    68:52:68:a2:ab:76:ef:09:e9:a0:c5:94:d0:35:ec:
                    c8:ad:0f:bd:e3:01:66:b6:78:0d:d7:f3:c2:80:3d:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:B1:78:41:EC:72:46:C3:A8:CD:1E:DE:61:3F:A0:D6:81:FA:E6
            X509v3 Authority Key Identifier:
                keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:87:55:2f:4f:09:fb:90:51:9d:11:4a:1f:99:aa:fe:be:ef:
         ea:de:97:b8:7d:a0:21:d5:97:e5:9a:a1:9f:90:ef:0d:86:21:
         07:56:3e:de:72:b5:ba:15:55:16:35:1f:4f:46:ee:b5:46:29:
         e8:7b:97:87:5e:13:70:98:99:35:1b:ca:df:cf:13:90:d5:60:
         b6:9a:a4:34:ad:06:b3:55:1d:a3:00:ff:71:40:8e:aa:5d:96:
         2a:95:ab:57:76:98:a7:d6:f1:9e:4c:b6:f4:3e:66:6c:a8:d7:
         68:12:f1:ac:d4:b8:dc:d8:ed:e5:9e:0e:b5:78:c9:72:d1:64:
         25:27:44:11:f2:e5:f1:c9:20:e9:0e:2b:01:27:68:c8:91:fa:
         c5:4f:67:72:f1:ce:73:6b:56:2d:d2:37:5d:86:03:bf:2c:ae:
         c4:9a:f4:bb:e7:04:90:b8:f3:c5:62:fe:77:1d:42:41:5c:f7:
         80:f7:e5:b6:f1:c9:59:5a:af:d6:5b:6c:aa:22:7e:78:71:8e:
         a8:5b:67:f2:32:aa:72:98:26:49:c6:b4:6e:7c:a2:e1:60:89:
         1b:7b:6c:9d:13:f4:7a:f4:15:35:37:1d:21:8f:3c:99:75:23:
         ff:a0:08:ba:91:f7:5f:2b:e3:d1:da:98:bc:d6:ec:69:10:04:
         04:d3:bf:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xfOxAA5/Ai+J+4avPSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl
ZDQyMTgwHhcNMjYwNDE3MTAwMTA2WhcNMjYwNDE4MTAwMTA2WjAzMTEwLwYDVQQD
EyhmMGQ3YjE3ODQxZWM3MjQ2YzNhOGNkMWVkZTYxM2ZhMGQ2ODFmYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6GLvWLHtEdDyASZvBsCpR/hWQgR
qQCNUksHQmmp3XaC3tOhPPoXzQe83WlRsS4y5tZv6+Omq7bLfply6PEVcK6trVrO
PGLG+F9v3dH2JpenduLDG44M+rbu/Cqk7dPsP5cnGwfNJFsoi3yg/falnd16KG6h
3MDW7ACK0WYO+an74YT4fJGh7/PFdk+d/vr+tqU02FD0x8O6kh0Pbnnpi8/S/C0s
tQLZq3PFiVc6rni8mR+Gd+uamIhfJUjH/OqlAWtLPPELzF0WQnpQT/jXrqllZSP0
xBol4m+LuzNMiq1oUmiiq3bvCemgxZTQNezIrQ+94wFmtngN1/PCgD1i5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDXsXhB7HJGw6jNHt5hP6DWgfrmMB8GA1UdIwQY
MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt
ZDI0YzM1ZGZhYzk0LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0
LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4dVL08J
+5BRnRFKH5mq/r7v6t6XuH2gIdWX5Zqhn5DvDYYhB1Y+3nK1uhVVFjUfT0butUYp
6HuXh14TcJiZNRvK388TkNVgtpqkNK0Gs1UdowD/cUCOql2WKpWrV3aYp9bxnky2
9D5mbKjXaBLxrNS43Njt5Z4OtXjJctFkJSdEEfLl8ckg6Q4rASdoyJH6xU9ncvHO
c2tWLdI3XYYDvyyuxJr0u+cEkLjzxWL+dx1CQVz3gPfltvHJWVqv1ltsqiJ+eHGO
qFtn8jKqcpgmSca0bnyi4WCJG3tsnRP0evQVNTcdIY88mXUj/6AIupH3Xyvj0dqY
vNbsaRAEBNO/FQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:10 2026 by rpki-client